Privacy Policy

This Privacy Policy explains how Zibblo ("Zibblo," "we," "us," or "our") collects, uses, and protects information when you install and use the Zibblo application (the "App") and the website at zibblo.app (the "Site"). The App helps Shopify merchants import the SanMar wholesale catalog, set pricing, design product mockups, and keep inventory and pricing synchronized with their Shopify store.

1. Who we are

Zibblo is an independent software application that connects a merchant's Shopify store to the SanMar catalog. Zibblo is not affiliated with, endorsed by, or sponsored by SanMar or Shopify. For any privacy question, contact us at support@zibblo.app.

2. Information we collect

Account and contact information

When you install the App or create an account, we collect your store's myshopify.com domain, and the name and email address of the person administering the account. If you contact us for support, we collect the information you choose to provide in that message.

Store and catalog data

To provide the service, we process data from your Shopify store and from the SanMar catalog, including products, variants, options (such as color and size), SKUs, barcodes, prices, inventory levels, and product images. We also store the configuration you create in Zibblo, such as pricing rules and product mockups.

Usage and technical data

We collect standard technical information such as IP address, browser type, pages viewed, and timestamps, together with logs needed to operate, secure, and troubleshoot the service.

3. Shopify store data

When you install the App, you authorize it through Shopify's standard OAuth flow. The App requests only the permissions needed to read and write product, inventory, and listing data so it can publish catalog items and keep them in sync. The App does not request the read_customers or read_orders permissions, and therefore does not access protected customer data.

We honor Shopify's mandatory compliance webhooks. If you uninstall the App, or if Shopify or a merchant sends a data-erasure request, we delete or anonymize the associated store data as described in Data retention.

4. SanMar catalog data

Zibblo ingests the SanMar product catalog (descriptions, specifications, images, pricing, and inventory availability) so you can publish and sync those products to your store. This catalog data is wholesale product information and does not include personal data about you or your customers.

5. How we use information

• To provide, operate, and maintain the App and Site.
• To import, publish, and synchronize products, inventory, and pricing with your store.
• To authenticate users and secure accounts.
• To respond to your support requests and communicate with you about the service.
• To monitor, troubleshoot, and improve performance and reliability.
• To comply with legal obligations and enforce our terms.

6. How we share information

We do not sell your personal information. We share information only as needed to run the service:

• Shopify — to read and write the store data you authorize.
• SanMar — as the source of the catalog and inventory data we ingest.
• Infrastructure and service providers that host and support the App, including our application and database hosting provider (Railway), object/image storage (Cloudflare R2), authentication for staff accounts (Auth0), and our contact-form provider (Web3Forms). These providers process data only on our behalf and under contract.
• Legal and safety — when required by law, to enforce our agreements, or to protect the rights, property, or safety of Zibblo, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. Data retention

We retain account and store data for as long as your account is active and the App is installed. When you uninstall the App or close your account, we delete or anonymize the associated store data within a commercially reasonable period (generally within 90 days), except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. We honor Shopify's shop/redact and customers/redact compliance webhooks.

8. Security

We use industry-standard measures to protect information, including encryption in transit (TLS), access controls, and credentials stored as secrets rather than in code. Webhook payloads are verified using HMAC signatures. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it to operate the service.

9. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing (for example, under the GDPR or CCPA/CPRA). To make a request, email support@zibblo.app and we will respond as required by applicable law. You can also remove the App at any time from your Shopify admin, which stops further data processing and triggers deletion as described above.

10. International data transfers

We may process and store information in the United States and other countries where we or our service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

11. Children

The App and Site are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the App or Site after a change takes effect constitutes acceptance of the updated Policy.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at support@zibblo.app.